Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DBE779FCB55511F09281119CDAE4EC9C.roa
File: DBE779FCB55511F09281119CDAE4EC9C.roa (raw, json)
Hash identifier: r38PJu83hUBvf7P5w3SkDI8cVfAvH12yPWpkkk25OPA=
Subject key identifier: 65:74:E2:50:A3:63:94:32:A7:49:26:31:6F:28:C5:DB:1D:7D:86:E6
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0835
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DBE779FCB55511F09281119CDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 06:01:22 +0000
ROA not before: Thu 30 Oct 2025 06:01:17 +0000
ROA not after: Fri 30 Oct 2026 06:01:17 +0000
asID: 54252
IP address blocks: 196.240.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Nov 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Oct 30 06:01:17 2025 GMT
Not After : Oct 30 06:01:17 2026 GMT
Subject: CN=6902ff32-11ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:23:3d:63:c1:32:98:f6:40:1f:af:a3:a4:
13:96:26:08:fd:b5:e4:19:f0:57:e3:78:b6:66:f3:
67:f2:ba:89:b7:c6:f4:43:ee:47:b0:5e:48:be:2c:
5c:ab:06:29:f4:95:3f:fb:d7:01:5c:02:01:02:46:
ef:cd:c5:f0:89:38:8d:12:f1:8f:f3:50:ab:32:90:
8e:7f:86:4b:6e:fb:79:ed:3d:a7:d7:89:29:0a:4a:
81:15:93:89:52:6e:59:69:17:9b:eb:71:b9:7d:f4:
68:73:c3:8d:66:1b:70:0a:cc:c7:39:63:ff:1f:47:
cb:63:f3:f1:74:3d:be:d0:c3:44:f7:da:78:b9:3c:
88:e9:3a:1a:39:e7:1d:e9:b1:aa:2d:13:ac:6b:af:
35:3d:62:3f:40:57:51:86:8e:e1:48:30:8b:6c:ed:
ed:25:2d:b5:a2:b9:50:9c:92:50:cb:1d:c4:bc:ed:
f7:42:27:c9:3a:18:3a:d3:28:5b:0f:fe:f4:63:0a:
10:21:c6:37:09:94:d8:bf:ad:54:c3:67:df:50:02:
c5:56:55:23:8d:e5:a2:21:e7:3a:62:32:36:23:19:
f2:ae:58:bd:1c:b1:f2:0c:b1:e2:0d:34:56:0d:45:
a9:57:5a:e0:c3:43:8e:67:0e:78:bb:2b:f5:e4:88:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:E2:50:A3:63:94:32:A7:49:26:31:6F:28:C5:DB:1D:7D:86:E6
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DBE779FCB55511F09281119CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.240.108.0/24
Signature Algorithm: sha256WithRSAEncryption
68:77:e5:0f:30:42:97:e2:30:11:14:cf:f8:3c:2f:99:48:f4:
64:74:8f:50:68:51:61:3e:f9:56:eb:66:fa:fe:8c:68:97:b9:
06:a1:54:fb:ef:ed:c5:e3:9d:47:ad:6d:36:be:44:de:16:12:
22:5a:dc:29:2c:c3:33:37:ef:f4:be:78:d6:07:ef:12:19:5c:
83:a6:5a:62:b1:47:10:ab:d5:74:8c:e3:9b:9b:48:ae:d6:9d:
d5:1a:94:11:0b:5e:a4:90:49:68:ed:07:20:8a:6c:13:0a:5a:
59:8b:79:44:36:1a:13:a5:a1:70:6b:f2:39:40:88:4f:22:bd:
43:c1:4f:01:10:66:10:7c:69:d2:5b:43:ab:d7:54:78:de:51:
04:fb:69:0f:a9:e9:ac:51:70:5d:29:67:79:40:70:1e:66:af:
16:a8:a3:59:a2:c6:9e:de:dd:6f:d3:96:04:b1:a5:db:c7:07:
56:e0:2e:d8:a9:10:d7:4e:54:87:7f:0c:2f:5b:dc:58:50:3e:
d7:7f:96:12:f7:86:fc:20:6d:56:14:bb:51:c9:fe:e3:04:f7:
71:bf:03:57:30:dd:5c:da:67:c7:08:a6:04:8a:fd:d7:1b:60:
c6:8e:c9:7b:d7:b6:86:1f:c8:66:54:86:e3:eb:77:86:8a:b3:
f8:66:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:07:49 2025 by rpki-client